CVE-2008-3362

CVE Database · CVE-2008-3362

CVE-2008-3362

· N/AModified

CVSS v3.1

N/A

EPSS

16.85%

Published

Jul 30, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBWordPress Plugin Download Manager 0.2 - Arbitrary File Upload TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.

Weaknesses (CWE)

CWE-20

Affected Products (2)

giulio_ganci · wp_downloads_managervulnerable

wordpress · wp_downloads_managervulnerable

References (8)

http://securityreason.com/securityalert/4060

http://www.securityfocus.com/bid/30365

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/43987

https://www.exploit-db.com/exploits/6127

http://securityreason.com/securityalert/4060

http://www.securityfocus.com/bid/30365

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/43987

https://www.exploit-db.com/exploits/6127

KEV Catalog EPSS Scores Vendors All CVEs